# PhishDestroy domain threat record: apk-binance.com.cn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/apk-binance.com.cn/
Machine-readable companion: https://phishdestroy.io/domain/apk-binance.com.cn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 15:29:09 UTC
- Last availability or vendor check: 2026-10-21 15:29:09 UTC
- Stored record updated: 2026-10-21 15:45:14 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Binance

## Stored infrastructure

- Observed IP address: 168.222.65.180
- Registrar in stored WHOIS data: 北京新网数码信息技术有限公司
- Last stored HTTP status: 200

## Evidence links

- URLScan report: https://urlscan.io/result/01a15f12-c437-72eb-8dae-64e1118551e4/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/apk-binance.com.cn
- Certificate Transparency search: https://crt.sh/?q=%25.apk-binance.com.cn
- Web Archive lookup: https://web.archive.org/web/*/https://apk-binance.com.cn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the page as malicious because it impersonates Binance, using the brand name and offering registration and app download, a pattern linked to credential theft. The domain was first seen by PhishDestroy on 2026-10-21, when an HTTP 200 response returned the recorded title “币安Binance官网入口｜币安注册 币安交易所”.

How the scam works
Fake exchange pages copy the visual design of a legitimate platform and present login or sign‑up forms to capture user credentials. They often host or link to counterfeit mobile apps that can harvest authentication tokens or install malware, enabling attackers to access the victim’s real account and move funds.

Evidence
VirusTotal scanned the domain on 2026-10-21 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the same day and did not flag the site. OTX listed no pulses for the domain on that date. urlscan.io captured the site on 2026-10-21; its machine‑learning engine marked it malicious with a score of 100, categorising it as phishing and associating it with the Binance brand. External blocklists MetaMask and SEAL also listed the domain, and PhishDestroy’s internal blocklist marks it as malicious.

Infrastructure
The recorded IP was 168.222.65.180, which belonged to OWGELS INTERNATIONAL CO., LIMITED in Hong Kong. TLS was provided by a LiteSSL RSA CA 2025 certificate valid from 2026-10-21 to 2027-01-19. The domain age, apex age and TLS age were recorded as zero days, indicating a newly created registration. Authoritative nameservers were ns1.myhostadmin.net and ns2.myhostadmin.net.

What to do
Users should not enter Binance credentials on this site; if they have, they should change their Binance password and review account activity. They should also avoid downloading any applications linked from the page. Defenders should add apk-binance.com.cn to blocklists, monitor access logs for requests to this exact hostname, and apply appropriate filtering for the recorded nameservers.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15f12-c437-72eb-8dae-64e1118551e4/
Stored capture screenshot: https://urlscan.io/screenshots/01a15f12-c437-72eb-8dae-64e1118551e4.png
URLScan screenshot (2026-10-21T15:29:47Z): https://screenshots.phishdestroy.io/us/01a15f15-0da6-74e6-aeda-3a3cdbc7719d.png
URLScan capture report: https://urlscan.io/result/01a15f15-0da6-74e6-aeda-3a3cdbc7719d/
VirusTotal report: https://www.virustotal.com/gui/domain/apk-binance.com.cn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=apk-binance.com.cn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 15:35:28 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a15f12-c437-72eb-8dae-64e1118551e4.png
  Captured: 2026-10-21 15:29:09 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a15f12-c437-72eb-8dae-64e1118551e4.png
  Captured: 2026-10-21 15:29:09 UTC
  Source report: https://urlscan.io/result/01a15f12-c437-72eb-8dae-64e1118551e4/
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f15-0da6-74e6-aeda-3a3cdbc7719d.png
  Captured: 2026-10-21 15:29:47 UTC
  Source report: https://urlscan.io/result/01a15f15-0da6-74e6-aeda-3a3cdbc7719d/
  SHA-256: 21349c70d0ef748d537b551f8fcfd44c2e781b5349d5a6b35e7f00e96655fde6

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T15:32:43Z",
        "uuid": "01a15f12-c437-72eb-8dae-64e1118551e4",
        "scanned_at": "2026-10-21T15:27:24Z",
        "final_url": "https://apk-binance.com.cn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://apk-binance.com.cn/",
                "from": "http://apk-binance.com.cn/",
                "status": 307
            }
        ],
        "ip": "168.222.65.180",
        "ips": [
            "168.222.65.180"
        ],
        "asns": [
            "153656"
        ],
        "countries": [
            "HK"
        ],
        "link_domains": [
            "download.bsmkweb.cc",
            "www.bsmkweb.cc"
        ],
        "doc_hash": "8f09961e9ea104a00cb92fec9a783521aa537aed6b2452aaf180e9f56cb75054",
        "tls": {
            "san": [
                "apk-binance.com.cn"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "LiteSSL RSA CA 2025",
            "subject": "apk-binance.com.cn",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-19T04:59:59Z",
            "valid_from": "2026-10-21T05:00:00Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 1,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "binance"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Binance"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T15:30:07Z",
        "analysis_at": "2026-10-21T06:29:53Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 39
        },
        "reputation": 0,
        "first_seen": "2026-10-21T06:30:21Z",
        "dns": [
            {
                "ttl": 600,
                "type": "A",
                "value": "168.222.65.180"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns1.myhostadmin.net"
            },
            {
                "ttl": 500,
                "type": "SOA",
                "rname": "dnsconct.myhostadmin.net",
                "value": "ns1.myhostadmin.net"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns2.myhostadmin.net"
            }
        ],
        "dns_at": "2026-10-21T06:30:21Z",
        "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763",
        "cert": {
            "san": [
                "apk-binance.com.cn"
            ],
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "serial": "79682afe4455bbbca5525bd9e525d6589d6b5169",
            "sha256": "50976bb45d5b8e50ce0571dcee9f5320a5af0cb8f3d1e5583a8bc61dfdab9542",
            "subject": "apk-binance.com.cn",
            "valid_to": "2027-01-19T04:59:59Z",
            "valid_from": "2026-10-21T05:00:00Z"
        },
        "whois": {
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns5.west.cn",
                "ns6.west.cn"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T15:33:02Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "apk-binance.com.cn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "ogUrl": "https://example.com/",
            "title": "币安Binance官网入口｜币安注册 币安交易所",
            "author": "币安 Binance 中文指南",
            "ogType": "website",
            "robots": "index,follow,max-snippet:-1,max-image-preview:large",
            "ogTitle": "币安Binance官网入口｜币安注册与App下载教程",
            "keywords": "币安,Binance,币安官网,币安注册,币安下载,币安App,币安交易所,币安开户",
            "ogSiteName": "币安 Binance 中文指南",
            "themeColor": "#0B0E11",
            "description": "币安Binance是全球领先的数字资产交易平台。本页提供币安官网注册入口、币安App下载方式、手续费说明与安全设置指南，帮助你快速完成币安开户并开始交易。",
            "twitterCard": "summary",
            "ogDescription": "币安Binance注册入口与App下载指引，包含手续费、安全设置与常见问题解答。"
        },
        "trackers": {
            "requests": 0
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1204,
                "tls": 199,
                "wait": 386,
                "connect": 193,
                "download": 0
            },
            "response_ms": 1982
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "carbon": {
            "bytes": 19666,
            "co2_grams": 0.0007,
            "cleaner_than": 57
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "211.149.230.100",
                    "host": "ns2.myhostadmin.net"
                },
                {
                    "ip": "60.247.150.254",
                    "host": "ns1.myhostadmin.net"
                }
            ],
            "zone": "apk-binance.com.cn"
        },
        "location": {
            "ip": "168.222.65.180",
            "asn": "153656",
            "org": "OWGELS INTERNATIONAL CO., LIMITED",
            "city": "Tsuen Wan",
            "country": "HK"
        },
        "ssl": {
            "issuer": "TrustAsia Technologies, Inc. / LiteSSL RSA CA 2025",
            "subject": "apk-binance.com.cn"
        },
        "dns": {
            "A": [
                "168.222.65.180"
            ],
            "NS": [
                "ns1.myhostadmin.net",
                "ns2.myhostadmin.net"
            ],
            "SOA": "{\"nsname\": \"ns1.myhostadmin.net\", \"hostmaster\": \"dnsconct.myhostadmin.net\", \"serial\": 2026102203, \"refresh\": 43200, \"retry\": 300, \"expire\": 1209600, \"minttl\": 3600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "168.222.65.180",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://apk-binance.com.cn"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "cn.apk-binance.com.cn"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Nginx",
                "HSTS",
                "Open Graph"
            ]
        },
        "linked_pages": {
            "external": [
                "https://download.bsmkweb.cc/pack/BNApp_F0002073.apk",
                "https://www.bsmkweb.cc/zh-CN/join"
            ],
            "external_count": 2,
            "internal_count": 4
        },
        "whois": {
            "registrar": "北京新网数码信息技术有限公司",
            "created": "2026-10-21T12:07:20Z",
            "expires": "2027-10-21T12:07:20Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns5.west.cn",
                "ns6.west.cn"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```